Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n6Q668kaW6sld4pyvgrAPzSDtN4.roa
File:                     n6Q668kaW6sld4pyvgrAPzSDtN4.roa (raw, json)
Hash identifier:          9y0zOnZQefPbqHzPCSrcJMnn85wBiIqIYWPqNviikYs=
Subject key identifier:   9F:A4:3A:EB:C9:1A:5B:AB:25:77:8A:72:BE:0A:C0:3F:34:83:B4:DE
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0183187E24C81A4039B5C976EA1938DDAFF8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n6Q668kaW6sld4pyvgrAPzSDtN4.roa
Signing time:             Wed 07 Sep 2022 15:07:43 +0000
ROA not before:           Wed 07 Sep 2022 15:07:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        163.5.232.0/24 maxlen: 24
                          163.5.228.0/24 maxlen: 24
                          163.5.230.0/24 maxlen: 24
                          163.5.231.0/24 maxlen: 24
                          163.5.233.0/24 maxlen: 24
                          163.5.229.0/24 maxlen: 24
                          163.5.227.0/24 maxlen: 24
                          163.5.236.0/24 maxlen: 24
                          163.5.234.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.240.0/24 maxlen: 24
                          163.5.235.0/24 maxlen: 24
                          163.5.237.0/24 maxlen: 24
                          163.5.239.0/24 maxlen: 24
                          163.5.242.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
                          163.5.246.0/24 maxlen: 24
                          163.5.243.0/24 maxlen: 24
                          163.5.241.0/24 maxlen: 24
                          163.5.245.0/24 maxlen: 24
                          163.5.250.0/24 maxlen: 24
                          163.5.248.0/24 maxlen: 24
                          163.5.252.0/24 maxlen: 24
                          163.5.249.0/24 maxlen: 24
                          163.5.251.0/24 maxlen: 24
                          163.5.247.0/24 maxlen: 24
                          163.5.253.0/24 maxlen: 24
                          163.5.254.0/24 maxlen: 24
                          163.5.255.0/24 maxlen: 24
                          163.5.176.0/24 maxlen: 24
                          163.5.178.0/24 maxlen: 24
                          163.5.174.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.177.0/24 maxlen: 24
                          163.5.173.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.180.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.184.0/24 maxlen: 24
                          163.5.181.0/24 maxlen: 24
                          163.5.183.0/24 maxlen: 24
                          163.5.185.0/24 maxlen: 24
                          163.5.188.0/24 maxlen: 24
                          163.5.192.0/24 maxlen: 24
                          163.5.187.0/24 maxlen: 24
                          163.5.189.0/24 maxlen: 24
                          163.5.191.0/24 maxlen: 24
                          163.5.194.0/24 maxlen: 24
                          163.5.196.0/24 maxlen: 24
                          163.5.198.0/24 maxlen: 24
                          163.5.193.0/24 maxlen: 24
                          163.5.195.0/24 maxlen: 24
                          163.5.197.0/24 maxlen: 24
                          163.5.199.0/24 maxlen: 24
                          163.5.204.0/24 maxlen: 24
                          163.5.206.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.202.0/24 maxlen: 24
                          163.5.205.0/24 maxlen: 24
                          163.5.201.0/24 maxlen: 24
                          163.5.203.0/24 maxlen: 24
                          163.5.208.0/24 maxlen: 24
                          163.5.210.0/24 maxlen: 24
                          163.5.212.0/24 maxlen: 24
                          163.5.207.0/24 maxlen: 24
                          163.5.209.0/24 maxlen: 24
                          163.5.211.0/24 maxlen: 24
                          163.5.213.0/24 maxlen: 24
                          163.5.214.0/24 maxlen: 24
                          163.5.216.0/24 maxlen: 24
                          163.5.218.0/24 maxlen: 24
                          163.5.215.0/24 maxlen: 24
                          163.5.217.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.222.0/24 maxlen: 24
                          163.5.220.0/24 maxlen: 24
                          163.5.224.0/24 maxlen: 24
                          163.5.226.0/24 maxlen: 24
                          163.5.221.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.225.0/24 maxlen: 24
                          163.5.125.0/24 maxlen: 24
                          163.5.131.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
                          163.5.129.0/24 maxlen: 24
                          163.5.130.0/24 maxlen: 24
                          163.5.132.0/24 maxlen: 24
                          163.5.128.0/24 maxlen: 24
                          163.5.133.0/24 maxlen: 24
                          163.5.137.0/24 maxlen: 24
                          163.5.139.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24
                          163.5.138.0/24 maxlen: 24
                          163.5.134.0/24 maxlen: 24
                          163.5.136.0/24 maxlen: 24
                          163.5.145.0/24 maxlen: 24
                          163.5.141.0/24 maxlen: 24
                          163.5.143.0/24 maxlen: 24
                          163.5.140.0/24 maxlen: 24
                          163.5.144.0/24 maxlen: 24
                          163.5.142.0/24 maxlen: 24
                          163.5.151.0/24 maxlen: 24
                          163.5.149.0/24 maxlen: 24
                          163.5.147.0/24 maxlen: 24
                          163.5.152.0/24 maxlen: 24
                          163.5.148.0/24 maxlen: 24
                          163.5.150.0/24 maxlen: 24
                          163.5.146.0/24 maxlen: 24
                          163.5.153.0/24 maxlen: 24
                          163.5.159.0/24 maxlen: 24
                          163.5.155.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.154.0/24 maxlen: 24
                          163.5.158.0/24 maxlen: 24
                          163.5.156.0/24 maxlen: 24
                          163.5.166.0/24 maxlen: 24
                          163.5.162.0/24 maxlen: 24
                          163.5.164.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.165.0/24 maxlen: 24
                          163.5.163.0/24 maxlen: 24
                          163.5.160.0/24 maxlen: 24
                          163.5.168.0/24 maxlen: 24
                          163.5.172.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24
                          163.5.167.0/24 maxlen: 24
                          163.5.169.0/24 maxlen: 24
                          163.5.171.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:18:7e:24:c8:1a:40:39:b5:c9:76:ea:19:38:dd:af:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Sep  7 15:07:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9fa43aebc91a5bab25778a72be0ac03f3483b4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6e:b4:b4:07:d3:c4:6c:e0:dd:d8:1d:ec:27:
                    d5:f2:bc:25:dc:f4:0b:b7:c4:a8:04:43:c0:fe:25:
                    fb:63:ab:ec:2d:92:57:d1:96:15:af:3b:e1:6f:32:
                    d0:d0:64:47:6b:4e:60:10:1f:32:54:54:5b:42:ff:
                    02:89:c4:8c:1c:3a:a2:75:5a:20:00:58:36:cb:78:
                    65:8d:75:91:5b:f8:04:41:68:03:4e:00:5e:5f:c6:
                    7b:4d:4c:a3:6c:73:c4:93:9b:19:fe:85:20:c7:3e:
                    85:e1:19:e3:90:55:bb:1d:80:34:6b:d7:c9:0f:3a:
                    e2:1c:9e:54:3a:b4:7d:db:66:91:43:a8:03:04:04:
                    e7:90:88:96:aa:e0:a9:9b:44:29:9b:24:9a:cb:5e:
                    d7:ac:d7:90:9f:88:60:7f:51:f5:94:67:d5:65:97:
                    94:21:3e:08:5f:5c:39:f3:04:a8:d1:20:f1:3b:ed:
                    0c:44:06:a2:25:c6:f3:da:47:04:07:60:1f:81:b6:
                    3c:b4:f6:35:89:bd:99:ad:54:23:aa:94:5e:ad:59:
                    39:9c:91:7b:42:6a:f9:06:2c:f6:9b:57:7e:40:00:
                    45:5b:42:0a:0f:ab:ff:08:f5:7e:48:60:dd:8c:21:
                    7a:ab:f9:ac:70:50:ce:49:82:3f:23:1d:66:b8:6a:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A4:3A:EB:C9:1A:5B:AB:25:77:8A:72:BE:0A:C0:3F:34:83:B4:DE
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n6Q668kaW6sld4pyvgrAPzSDtN4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.125.0/24
                  163.5.127.0-163.5.189.255
                  163.5.191.0-163.5.255.255
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:2b:64:53:49:01:7b:54:65:c6:0c:ba:78:17:91:8b:db:bb:
         45:38:4f:9e:a3:2f:2b:37:e6:58:75:1b:28:68:0b:e5:08:5d:
         3f:4b:e1:9a:56:62:30:34:28:2f:6b:06:98:98:87:48:05:73:
         46:cb:7f:2c:41:c9:ea:9e:90:0b:69:8a:f4:be:b9:74:f6:db:
         d2:5d:53:28:68:c1:28:a1:5c:72:f4:26:22:ce:bb:24:7c:3e:
         aa:5a:b4:59:50:66:05:cf:06:e1:2b:7d:80:52:bf:a3:09:5d:
         6c:ba:f1:65:c1:c0:4a:e6:5d:6d:8c:f4:84:b5:1f:93:ab:20:
         05:de:90:e6:55:2b:9d:6f:48:f7:8a:df:5b:0a:d3:2b:38:2c:
         4c:9b:ff:da:06:03:9c:16:56:26:d2:8f:88:f5:d6:29:ab:08:
         ba:0c:c9:cb:4c:f0:f2:c2:c6:75:ee:9f:43:ba:77:e6:39:98:
         e0:ba:3d:35:78:1c:a7:8f:3a:64:8e:db:cb:24:39:66:fe:d9:
         f6:1d:e2:56:2c:24:ad:75:ab:70:53:b4:bf:e8:c1:af:e8:36:
         37:07:48:1a:a7:40:83:ee:37:06:3b:3a:3b:46:eb:e2:83:50:
         e6:e3:82:3a:8d:eb:4b:86:45:9c:75:59:97:bc:89:2d:d3:7c:
         17:15:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org